#
# Copyright (c) 2024 remittor
#

include $(TOPDIR)/rules.mk

PKG_NAME:=zapret
PKG_VERSION:=72.20260116
PKG_RELEASE:=1

PKG_MAINTAINER:=bol-van
PKG_LICENSE:=MIT
PKG_LICENSE_FILES:=docs/LICENSE.txt

PKG_SOURCE_URL:=https://github.com/bol-van/zapret.git
PKG_SOURCE_PROTO:=git
PKG_SOURCE_VERSION:=c849e55ef0f1c244206f5a05ff7b1ab41a3824ee
PKG_SOURCE_DATE:=2026-01-16

#PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.gz
#PKG_SOURCE_URL:=https://github.com/bol-van/zapret/archive/refs/tags/v$(PKG_VERSION).tar.gz?
#PKG_HASH:=skip

include $(INCLUDE_DIR)/package.mk

#TAR_OPTIONS:=--strip-components 1 $(TAR_OPTIONS)
#TAR_CMD=$(HOST_TAR) -C $(1) $(TAR_OPTIONS)

MAKE_PATH:=nfq

define Package/$(PKG_NAME)
	SECTION:=net
	CATEGORY:=Network
	TITLE:=$(PKG_NAME)
	SUBMENU:=Zapret
	URL:=https://github.com/bol-van/zapret
	DEPENDS:= +nftables +curl +gzip
	DEPENDS+= +coreutils +coreutils-sort +coreutils-sleep
	DEPENDS+= +kmod-nft-nat +kmod-nft-offload +kmod-nft-queue
	DEPENDS+= +libnetfilter-queue +libcap +zlib
endef

define Build/Prepare
	$(Build/Prepare/Default)
	rm -f $(PKG_BUILD_DIR)/$(MAKE_PATH)/nfqws
	rm -f $(PKG_BUILD_DIR)/ip2net/ip2net
	rm -f $(PKG_BUILD_DIR)/mdig/mdig
endef

#define Build/Configure
#endef

define Build/Compile
	$(MAKE) -C $(PKG_BUILD_DIR)/$(MAKE_PATH) $(TARGET_CONFIGURE_OPTS)
	$(MAKE) -C $(PKG_BUILD_DIR)/ip2net $(TARGET_CONFIGURE_OPTS)
	$(MAKE) -C $(PKG_BUILD_DIR)/mdig $(TARGET_CONFIGURE_OPTS)
endef

ZAPRET_DIR := /opt/zapret

define ZAPRET_CONFFILES_LIST
$(ZAPRET_DIR)/config
$(ZAPRET_DIR)/ipset/zapret-hosts-google.txt
$(ZAPRET_DIR)/ipset/zapret-hosts-user.txt
$(ZAPRET_DIR)/ipset/zapret-hosts-user-exclude.txt
$(ZAPRET_DIR)/ipset/zapret-ip-exclude.txt
$(ZAPRET_DIR)/ipset/zapret-hosts-auto.txt
$(ZAPRET_DIR)/ipset/cust1.txt
$(ZAPRET_DIR)/ipset/cust2.txt
$(ZAPRET_DIR)/ipset/cust3.txt
$(ZAPRET_DIR)/ipset/cust4.txt
$(ZAPRET_DIR)/init.d/openwrt/custom.d/10-script.sh
$(ZAPRET_DIR)/init.d/openwrt/custom.d/20-script.sh
$(ZAPRET_DIR)/init.d/openwrt/custom.d/50-script.sh
$(ZAPRET_DIR)/init.d/openwrt/custom.d/60-script.sh
$(ZAPRET_DIR)/init.d/openwrt/custom.d/90-script.sh
endef

$(eval ZAPRET_CONFFILES := $(foreach file,$(ZAPRET_CONFFILES_LIST),$(strip $(file))))

define Package/$(PKG_NAME)/conffiles
$(ZAPRET_CONFFILES_LIST)
endef

define Package/$(PKG_NAME)/install
	$(INSTALL_DIR) $(1)$(ZAPRET_DIR)
	$(INSTALL_DIR) $(1)$(ZAPRET_DIR)/$(MAKE_PATH)
	$(INSTALL_BIN) $(PKG_BUILD_DIR)/$(MAKE_PATH)/nfqws $(1)$(ZAPRET_DIR)/$(MAKE_PATH)/
	$(INSTALL_DIR) $(1)$(ZAPRET_DIR)/ip2net
	$(INSTALL_BIN) $(PKG_BUILD_DIR)/ip2net/ip2net $(1)$(ZAPRET_DIR)/ip2net/
	$(INSTALL_DIR) $(1)$(ZAPRET_DIR)/mdig
	$(INSTALL_BIN) $(PKG_BUILD_DIR)/mdig/mdig $(1)$(ZAPRET_DIR)/mdig/
	$(INSTALL_DIR) $(1)$(ZAPRET_DIR)/common
	$(CP) $(PKG_BUILD_DIR)/common/* $(1)$(ZAPRET_DIR)/common/
	#$(INSTALL_DIR) $(1)$(ZAPRET_DIR)/docs
	#$(CP) $(PKG_BUILD_DIR)/docs/* $(1)$(ZAPRET_DIR)/docs/
	$(INSTALL_DIR) $(1)$(ZAPRET_DIR)/files
	$(CP) $(PKG_BUILD_DIR)/files/* $(1)$(ZAPRET_DIR)/files/
	$(CP)                ./files/* $(1)$(ZAPRET_DIR)/files/
	$(INSTALL_DIR) $(1)$(ZAPRET_DIR)/ipset
	$(CP) $(PKG_BUILD_DIR)/ipset/* $(1)$(ZAPRET_DIR)/ipset/
	$(INSTALL_BIN)  $(PKG_BUILD_DIR)/blockcheck.sh  $(1)$(ZAPRET_DIR)/blockcheck.sh
	$(INSTALL_DIR) $(1)$(ZAPRET_DIR)/tmp
	$(INSTALL_DIR) $(1)$(ZAPRET_DIR)/init.d/openwrt
	$(CP) $(PKG_BUILD_DIR)/init.d/openwrt/* $(1)$(ZAPRET_DIR)/init.d/openwrt/
	$(INSTALL_DIR) $(1)/etc/hotplug.d/iface
	$(INSTALL_BIN) $(PKG_BUILD_DIR)/init.d/openwrt/90-zapret $(1)/etc/hotplug.d/iface/90-zapret
	$(INSTALL_DIR) $(1)/etc/init.d
	$(INSTALL_BIN) ./init.d.sh $(1)/etc/init.d/zapret
	$(INSTALL_DIR) $(1)$(ZAPRET_DIR)/init.d
	$(INSTALL_DIR) $(1)$(ZAPRET_DIR)/init.d/openwrt
	$(INSTALL_DIR) $(1)$(ZAPRET_DIR)/init.d/openwrt/custom.d
	$(INSTALL_DIR) $(1)/etc/uci-defaults
	$(INSTALL_BIN) ./uci-def-cfg.sh     $(1)/etc/uci-defaults/zapret-uci-def-cfg.sh
	# install all sh-scripts
	$(CP) ./*.sh $(1)$(ZAPRET_DIR)/
	rm -f $(1)$(ZAPRET_DIR)/init.d.sh
	# Install conf files
	$(foreach cfg,$(ZAPRET_CONFFILES), \
		rel="$(cfg:$(ZAPRET_DIR)/%=%)"; \
		src="./$$$$rel"; \
		if echo "$$$$rel" | grep -q "/custom.d/"; then \
			src="./custom.d/$$$$(basename $$$$rel)"; \
		fi; \
		dst="$(1)$(cfg)"; \
		mkdir -p "$(1)$(dir $(cfg))"; \
		rm -f "$$$${dst}"; \
		if [ -f "$$$${src}" ]; then \
			$(INSTALL_DATA) "$$$${src}" "$$$${dst}"; \
		else \
			$(INSTALL_DATA) /dev/null "$$$${dst}"; \
		fi; \
	)
	# Fix main config file
	rm -f $(1)$(ZAPRET_DIR)/config
	$(INSTALL_DATA) ./config.default $(1)$(ZAPRET_DIR)/config
	$(INSTALL_DATA) ./config.default $(1)$(ZAPRET_DIR)/config.default
	# Install def conf files
	$(INSTALL_DIR) $(1)$(ZAPRET_DIR)/ipset_def
	$(CP) ./ipset/zapret*.txt  $(1)$(ZAPRET_DIR)/ipset_def/
	# Fix permissions
	chmod 644 $(1)$(ZAPRET_DIR)/ipset/*.txt
	chmod 644 $(1)$(ZAPRET_DIR)/ipset_def/*.txt
	chmod 644 $(1)$(ZAPRET_DIR)/init.d/openwrt/custom.d/*.sh
	chmod 644 $(1)$(ZAPRET_DIR)/config*
	chmod 755 $(1)$(ZAPRET_DIR)/*.sh
	chmod 755 $(1)$(ZAPRET_DIR)/$(MAKE_PATH)/*
	chmod 755 $(1)$(ZAPRET_DIR)/ip2net/*
	chmod 755 $(1)$(ZAPRET_DIR)/mdig/*
	# Disable TPWS in blockcheck
	grep -q '^SKIP_TPWS=' $(1)$(ZAPRET_DIR)/blockcheck.sh || sed -i '/^NFT_TABLE=blockcheck$$$$/a SKIP_TPWS=$$$${SKIP_TPWS:-1}' $(1)$(ZAPRET_DIR)/blockcheck.sh
endef

define Package/$(PKG_NAME)/preinst
#!/bin/sh
# check if we are on real system
if [ -z "$${IPKG_INSTROOT}" ]; then
	ZAPRET_DIR=/opt/zapret
	ZAPRET_INITD=/etc/init.d/zapret
	ZAPRET_CFG=/etc/config/zapret
	if [ -f "$${ZAPRET_INITD}" ]; then
		SCRIPT=$$( readlink "$${ZAPRET_INITD}" )
		if [ -n "$${SCRIPT}" ]; then
			echo "Please uninstall incompatible \"zapret\" service!"
			exit 44
		fi
	fi
	if command -v apk >/dev/null; then
		PKG_MGR="apk"
		PKG_CHECK="apk info -e "
		PKG_REMOVE="apk del --force "
	else
		PKG_MGR="opkg"
		PKG_CHECK="opkg status "
		PKG_REMOVE="opkg remove --force-remove "
	fi
	if [ "$${PKG_UPGRADE}" = "1" ]; then
		# stop service if PKG_UPGRADE
		if [ -x "$${ZAPRET_INITD}" ]; then
			$${ZAPRET_INITD} running && $${ZAPRET_INITD} stop >/dev/null 2>&1
		fi
	fi
	if $${PKG_CHECK} zapret >/dev/null 2>&1; then
		if [ ! -f "/opt/zapret/sync_config.sh" ]; then
			echo "Please uninstall incompatible \"zapret\" package!"
			exit 47
		fi
		if [ -f "$${ZAPRET_CFG}" ] && ! grep -q "run_on_boot" "$${ZAPRET_CFG}"; then
			echo "Please uninstall incompatible \"zapret\" package!"
			exit 48
		fi
	fi
	if $${PKG_CHECK} luci-app-zapret >/dev/null 2>&1; then
		SVC_FILE=/www/luci-static/resources/view/zapret/service.js
		if [ ! -f "$${SVC_FILE}" ] || ! grep -Fq "/remittor/zapret-openwrt" "$${SVC_FILE}"; then
			echo "Please uninstall incompatible \"luci-app-zapret\" package!"
			exit 55
		fi
	fi
	if [ -f "$${ZAPRET_CFG}" ] && ! grep -q "run_on_boot" "$${ZAPRET_CFG}"; then
		if [ -x "$${ZAPRET_INITD}" ]; then
			$${ZAPRET_INITD} running && $${ZAPRET_INITD} stop >/dev/null 2>&1
		fi
		rm -f $${ZAPRET_CFG}
		rm -f $${ZAPRET_INITD}
		[ -d "$${ZAPRET_DIR}" ] && rm -rf $${ZAPRET_DIR}
		echo "All files of the previously installed package have been removed!"
	fi
	if $${PKG_CHECK} zapret-mdig >/dev/null 2>&1; then
		$${PKG_REMOVE} zapret-mdig
	fi
	if $${PKG_CHECK} zapret-ip2net >/dev/null 2>&1; then
		$${PKG_REMOVE} zapret-ip2net
	fi
	if [ ! -d "$${ZAPRET_DIR}" ]; then
		mkdir -p $${ZAPRET_DIR}
	fi
	if [ ! -f "/opt/zapret/ipset/zapret-hosts-google.txt" ]; then
		if [ -f "/opt/zapret/ipset/zapret-hosts-user.txt" ]; then
			CFGLISTHASH=$$( md5sum "/opt/zapret/ipset/zapret-hosts-user.txt" | awk '{print $$1;}' )
			if [ "$${CFGLISTHASH}" = "79e35df62b0d1ae455d0a7e04c4cecac" ]; then
				rm -f "/opt/zapret/ipset/zapret-hosts-user.txt"
			fi
		fi
	fi
fi
exit 0
endef

define Package/$(PKG_NAME)/postinst
#!/bin/sh
# check if we are on real system
if [ -z "$${IPKG_INSTROOT}" ]; then
	ZAPRET_DIR=/opt/zapret
	ZAPRET_INITD=/etc/init.d/zapret
	ZAPRET_CFG=/etc/config/zapret
	ZAPRET_CONFIG=/opt/zapret/config
	ZAPRET_CONFIG_DEF="/opt/zapret/config.default"
	# Fix permissions
	chmod 644 $${ZAPRET_CFG} >/dev/null 2>&1
	chmod 644 $${ZAPRET_DIR}/ipset/*.txt >/dev/null 2>&1
	chmod 644 $${ZAPRET_DIR}/ipset_def/*.txt >/dev/null 2>&1
	chmod 644 $${ZAPRET_DIR}/init.d/openwrt/custom.d/*.sh >/dev/null 2>&1
	chmod 644 $${ZAPRET_DIR}/config* >/dev/null 2>&1
	# creating main config if its not exists
	if [ ! -f "$${ZAPRET_CONFIG}" ]; then
		cp -f "$${ZAPRET_CONFIG_DEF}" "$${ZAPRET_CONFIG}"
	fi
	# check obsolete format for main config
	if grep -qE "^NFQWS_OPT_DESYNC=|^MODE_HTTP=|^MODE_HTTPS=|^MODE_QUIC=|^MODE=" "$${ZAPRET_CONFIG}" ; then
		echo "Detect obsolute format for main config!"
		ZAPRET_CONFIG_BACKUP="$${ZAPRET_CONFIG}.backup"
		cp -f "$${ZAPRET_CONFIG}" "$${ZAPRET_CONFIG_BACKUP}"
		echo "Current file $${ZAPRET_CONFIG} backuped to $${ZAPRET_CONFIG_BACKUP}"
		cp -f "$${ZAPRET_CONFIG_DEF}" "$${ZAPRET_CONFIG}"
	fi
	# remove fake uci-config
	[ -f "$${ZAPRET_CFG}" ] && [ ! -s "$${ZAPRET_CFG}" ] && rm -f "$${ZAPRET_CFG}"
	# check existing uci-config
	[ -f "$${ZAPRET_CFG}" ] && ZAPRET_CFG_EXISTS=1 || ZAPRET_CFG_EXISTS=0
	# create or merge uci-config
	/opt/zapret/uci-def-cfg.sh
	[ "$${ZAPRET_CFG_EXISTS}" = "1" ] && echo "Config /etc/config/zapret merged with default uci-config"
	# remove uci-default script from system dir (used into /etc/init.d/boot)
	rm -f /etc/uci-defaults/zapret-uci-def-cfg.sh
	# copy (sync) all params from uci-config to main config
	/opt/zapret/sync_config.sh
	# check main config
	sh -n "$${ZAPRET_CONFIG}" 2>/dev/null || cp -f "$${ZAPRET_CONFIG_DEF}" "$${ZAPRET_CONFIG}"
	sh -n "$${ZAPRET_CONFIG}" 2>/dev/null || exit 58
	# enable main service
	$${ZAPRET_INITD} enable
	# stop all
	$${ZAPRET_INITD} stop_fw >/dev/null 2>&1
	$${ZAPRET_INITD} stop_daemons >/dev/null 2>&1
	ps w | grep '/opt/zapret/nfq/nfqws' | grep -v grep | awk '{print $$1}' | xargs -r kill -9
	# start main service
	$${ZAPRET_INITD} start
	# restart firewall
	[ -x /sbin/fw4 ] && fw4 -q restart || fw3 -q restart
fi
exit 0
endef

define Package/$(PKG_NAME)/prerm
#!/bin/sh
# check if we are on real system
if [ -z "$${IPKG_INSTROOT}" ]; then
	ZAPRET_DIR=/opt/zapret
	ZAPRET_BASE=/opt/zapret
	ZAPRET_INITD=/etc/init.d/zapret
	ZAPRET_CFG=/etc/config/zapret
	ZAPRET_CONFIG=/opt/zapret/config
	ZAPRET_CONFIG_DEF="/opt/zapret/config.default"
	OPENWRT_FW_INCLUDE=/etc/firewall.zapret
	# check main config
	sh -n "$${ZAPRET_CONFIG}" 2>/dev/null || cp -f "$${ZAPRET_CONFIG_DEF}" "$${ZAPRET_CONFIG}"
	if ! sh -n "$${ZAPRET_CONFIG}" 2>/dev/null ; then
		ps w | grep '/opt/zapret/nfq/nfqws' | grep -v grep | awk '{print $$1}' | xargs -r kill -9
		exit 0
	fi
	. "$${ZAPRET_CONFIG}"
	. "$${ZAPRET_BASE}/common/base.sh"
	. "$${ZAPRET_BASE}/common/fwtype.sh"
	. "$${ZAPRET_BASE}/common/nft.sh"
	. "$${ZAPRET_BASE}/common/installer.sh"
	$${ZAPRET_INITD} running && $${ZAPRET_INITD} stop >/dev/null 2>&1
	$${ZAPRET_INITD} disable >/dev/null 2>&1
	ps w | grep '/opt/zapret/nfq/nfqws' | grep -v grep | awk '{print $$1}' | xargs -r kill -9
	remove_openwrt_firewall
	nft_del_table
	restart_openwrt_firewall
fi
exit 0
endef

define Package/$(PKG_NAME)/postrm
#!/bin/sh
# check if we are on real system
if [ -z "$${IPKG_INSTROOT}" ]; then
	rm -f /etc/config/zapret-opkg*
	rm -f /etc/config/zapret.opkg*
	rm -f /etc/config/zapret.apk*
	[ -f "/opt/zapret/config" ] && cp -f /opt/zapret/config "/opt/zapret/config.backup"
	#rm -rf /opt/zapret
	#echo "Directory /opt/zapret removed!"
fi
exit 0
endef

$(eval $(call BuildPackage,$(PKG_NAME)))